Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d8d154c-d27a-3997-b672-6acc2eb3a6df.roa
File:                     4d8d154c-d27a-3997-b672-6acc2eb3a6df.roa (raw, json)
Hash identifier:          2labqBkVjrIMavjvZxBjSyxa0yIhXzcPec8Kl8JPrZA=
Subject key identifier:   A6:E1:33:ED:EE:8A:6A:C7:9C:DF:F2:A0:22:05:7C:CE:50:16:30:F9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D366F5700CF8FA98EB2D4A000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d8d154c-d27a-3997-b672-6acc2eb3a6df.roa
Signing time:             Wed 18 Mar 2026 19:59:34 +0000
ROA not before:           Wed 18 Mar 2026 19:59:34 +0000
ROA not after:            Tue 16 Jun 2026 19:59:34 +0000
asID:                     401152
IP address blocks:        23.26.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:6f:57:00:cf:8f:a9:8e:b2:d4:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 18 19:59:34 2026 GMT
            Not After : Jun 16 19:59:34 2026 GMT
        Subject: CN=76ef4201-4f56-4cdc-a038-99db3bfec835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cd:cc:c0:ad:89:f0:11:47:7e:80:da:d0:a9:
                    fe:68:bf:2e:12:78:cc:06:e9:34:6f:04:c0:9b:23:
                    34:f3:ef:05:20:77:0b:b2:af:a3:5f:f8:9f:53:8f:
                    02:f4:d4:0e:44:dd:de:82:a8:61:60:83:cc:71:59:
                    43:9f:3c:0d:3f:5b:86:ac:da:55:eb:25:53:79:0c:
                    c0:62:cb:ff:5d:3d:e8:d9:00:63:bd:36:41:30:16:
                    65:89:56:85:35:64:00:c3:ea:9c:2f:dc:bb:8b:7a:
                    57:f9:50:64:c8:2f:ed:81:19:af:cb:5e:ca:bd:95:
                    1f:0e:18:b5:73:14:3c:88:2a:ee:54:ae:52:85:ee:
                    39:cc:89:f3:cd:08:58:13:a3:c9:03:9d:1d:24:ea:
                    86:c4:b4:3b:f3:f6:54:10:20:fa:2c:d7:6f:e1:4e:
                    a2:73:0d:a7:68:78:93:42:aa:6c:05:a2:c7:08:70:
                    bd:a1:05:9e:1f:c9:ba:cf:b6:fa:b5:29:b5:2e:e5:
                    27:f1:ab:68:3c:f3:01:f6:b0:2e:2d:09:78:83:3f:
                    08:8a:cd:f2:b9:ec:56:20:7c:47:54:c1:5c:55:92:
                    0d:7b:89:89:40:00:26:6f:72:59:f9:95:61:91:cc:
                    80:23:3c:3d:8b:8f:52:55:51:a4:31:3d:3b:b9:6c:
                    dd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E1:33:ED:EE:8A:6A:C7:9C:DF:F2:A0:22:05:7C:CE:50:16:30:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d8d154c-d27a-3997-b672-6acc2eb3a6df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:6e:81:bd:7d:6e:67:ec:b2:ff:15:18:3a:4b:65:0a:21:da:
         13:72:58:36:61:6f:77:76:38:f2:df:bd:28:40:d3:72:c0:03:
         db:77:82:09:4e:d1:73:2d:d4:ae:4c:67:91:4d:2c:65:b8:95:
         7b:ef:73:8e:25:80:96:f5:62:f9:0b:c1:77:ca:3e:2b:0c:6a:
         e6:74:89:c9:88:2f:2a:8d:10:43:1d:40:57:a3:23:31:2e:3b:
         b3:aa:84:4e:f5:01:aa:38:97:72:9d:04:01:61:e6:e0:85:42:
         8d:31:1d:cb:04:37:7b:89:5c:5b:a8:3a:21:0d:27:f3:9a:4c:
         b1:be:fe:65:95:a8:f3:14:e6:0d:34:ee:13:d4:1e:fc:7c:0b:
         e5:24:aa:98:2d:93:43:7e:b1:1f:67:2c:cf:3f:c0:1b:0d:a3:
         cc:72:85:a2:6c:dc:f2:82:21:2c:f8:0e:b0:bb:6a:59:e6:7e:
         c6:75:40:b8:b7:d2:8b:5e:86:dc:86:fb:fe:10:9b:38:4e:d7:
         a5:49:ca:d5:d7:72:33:8d:7a:32:84:a3:4b:f7:32:92:d9:fd:
         f7:03:1a:5b:05:cc:b7:0d:80:71:b5:1f:be:3b:d1:06:df:ff:
         f4:19:bd:7f:5d:37:67:5d:b1:d4:4f:e1:38:e4:01:41:10:c0:
         23:67:ea:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:48:20 2026 by rpki-client